Forum Discussion

CSI's avatar
CSI
Copper Contributor
Feb 21, 2025
Solved

Deactivating Option to change Profile Picture at myaccount.microsoft.com

As the title says. I would like to deactivate the option for users to change their profile picture at myaccount.microsoft.com. The profile picture at our company is synchronized to AD and via Entra Connect to Entra ID. 

Is there an option as an admin to deactivate that option without deactivating the entire portal?

 

Kind Regards

Christopher Siebertz

4 Replies

  • KaliN's avatar
    KaliN
    Copper Contributor

    You can via Graph: https://learn.microsoft.com/en-us/graph/profilephoto-configure-settings

  • petrmusilleeds's avatar
    petrmusilleeds
    Copper Contributor

    I'm not sure but if you can deactivate that security part you will be not able to access your other services   you have conected 

  • The solution Microsoft provides for this scenario is the new "profile photo update settings". It allows you to configure which role(s) can be used for this operations, including allowing users to change their own photo. For the time being, the setting is only available via Graph though. I wrote a short article about it a while ago: https://www.michev.info/blog/post/6196/how-to-control-profile-photo-updates-in-microsoft-365-via-the-photoupdatesettings-control 

  • To disable the option for users to change their profile picture at my account.microsoft.com , use Azure AD PowerShell:

    1. Connect to Azure AD:
    2. powershell -> Connect-AzureA
    3. Disable profile picture changes:
    4. powershell ->Set-MsolCompanySettings -UsersPermissionToChangeProfilePictureDisabled $true

    This ensures profile pictures remain synced from on-premises AD via Azure AD Connect. Communicate the change to users, as they will no longer be able to update their pictures manually.

Resources